Slashdot Mirror
Adobe Flash Exploit Could Log Keystrokes
Kenyon Lessi writes "Adobe has issued three critical security updates, one of which is designed to stop a problem in the way the Flash player interacts with browsers, which could result in users' keystrokes being transmitted to attackers.
The problem affect Adobe Flash Player version 9.0.45.0, 8.0.34.0 and 7.0.69.0, as well as their earlier versions running on all platforms."
You'd think that it would have occurred to them that they were putting a Flash ad on a page discussing a major flaw in Flash. Of course, they just want to get paid and don't really care about you, so I can't say I'm all that surprised.
they should Open Source the player. That would solve most of their problems.
The only bit that is worth anything is the Flash IDE designer thingy.
If it was opensource it'd be a great stop gap between HTML + JS (now) and HTML + SVG + JS (future). It'd also help fight Silverlight, which is gunna take over the world if we aren't careful :-(
Any other ideas for spreading multi-media web without using Java (ugh) Flash (ugh) or Silverlight (hm...)?
monk.e.boy
Open source, flash charts
Actually, the keypresses only make it as far as Javascript. In order to "hear" the presses in Flash, you need to use the WiiCade API, which traps all the keypresses and forwards them to Flash. There's also the earlier Quasimondo API, but it fails to trap the keypresses, making it useless under most circumstances.
Javascript + Nintendo DSi = DSiCade
"Mod, mod, mod...and another troll bites the dust."
Even though my primary computer has Linux installed I find myself hoping that the new Windows Silverlight will give Flash a lot of healthy competition.
You're hoping that Flash will be displaced by Silverlight, a Microsoft offering? Seriously?
Say what you want about Adobe but at least Flash is available for more than Windows and OSX, which are the only two OSes that Silverlight will be available on.
Not only do Adobe produce Linux players, they also produce a Solaris player. Good luck trying to get either of those out of Microsoft this side of armageddon.
Oh, and I do appreciate that some people consider Flash to be an evil tool but at least you have the choice whether or not to install it. You just know that with Silverlight, as with MSIE, installation will be compulsory somewhere down the line, via a critical update or service pack.
Trust me, if you're worried about monopolies then the last company that you want involved in building a Flash killer is Microsoft.
"Accept that some days you are the pigeon, and some days you are the statue." - David Brent, Wernham Hogg
We don't allow people to install Flash on their systems here at work but we do provide the ActiveX component to run Flash. Is it affected as well? The article doesn't say.
Personally, I don't run Flash. Time and again it has been shown to be a security risk and these new developments only strengthen that perception.
We will bankrupt ourselves in the vain search for absolute security. -- Dwight D. Eisenhower
So well written that they couldn't port it to 64bit platforms without rewriting the underlying script host from the ground up.
Portability (which has multiple dimensions) is not a measure of quality, it is a design goal that may or may not be part of the goals of a project.
Sometimes it's best to just let stupid people be stupid.
Look at IE between killing off NetScape and FireFox becoming popular. Now compare that to IE when it had competition from NetScape and later FireFox. I don't want SilverLight to win, but I'd much rather Flash had some competition, because competition helps encourage innovation.
I am TheRaven on Soylent News
More accurate would be "Adobe Issues Fixes For Flash Exploit That Could Log Keystrokes"...
Headline implies that exploits were just found and still exist. Not so.
You sir, are not a programmer. End of story.
"But this one goes to 11!"